
Practical Lab Environment Purpose Built to Span the Full Range of ICS/OT Communications

SPECIFICATIONS

CyRenLAB is the only laboratory environment purpose-built to span the full range of ICS/OT communications – analog, serial, and IP – in a single modular platform. Unlike other ICS labs that simulate partial network layers (IP only) or omit critical communication types including analog measuerements, serial data streams, and IP-based network traffic. CyRenLAB enables complete protocol and network coverage from Level 0 to Level 3.
Designed for NOC/SOC operators, researchers, forensic and incident responders, and educators, CyRenLAB provides a full spectrum real-world industrial environment versus just simulated IP networks. CyRenLAB enables hands-on activities in continuous monitoring and detection, baseline development, incident response, threat simulation, and industrial protocol research from Level 0 to Level 3.
The Problem: Significant Gaps in ICS/OT Readiness

ICS/OT cybersecurity teams face critical challenges:
- Gaps in protocol visibility across serial, analog, and IP communications
- Lack of data normalization and curation from Level 0 through Level 5
- No access to safe, full spectum realistic environments for training or testing
- Inability to simulate threats across multiple levels of the Purdue Model
- Risk of disrupting production systems
These issues delay detection readiness, increase risk exposure, weaken response coordination across operations, and increase resource requirements for cybersecurity teams.
The Solution: CyRenLAB
CyRenLAB addresses these gaps by delivering a platform that is representative of realistic industrial control system architectures without risking live infrastructure and operations. CyRenLAB provides training, simulation, testing, and R&D across ICS networks, protocols and device types, enabling:
- Continuous monitoring, detection and baselining
- Incident response training
- Cyber-physical scenario validation
- Detection activities including anomaly reproduction and forensic data analysis
- Data normalization, curation, and contextualization for data analysis and AI/ML integration
- Adversarial and exploit testing and validation
CyRenLAB generates high-fidelity operational data for use in detection, operational and security analytics, baseline modeling, training and integration for Machine Learning and Artifical Intelligence platforms.
Key Capabilities

Full Stack ICS Protocol Support
Supports analog (4–20mA), serial, and IP protocols including Modbus, DNP3, IEC 101/104

Multi-Level Support
Simulates full ICS stack from Level 0 to Level 3 using Purdue model

Secure Testing
Hardware-in-the-loop with SCADA controllers, drives, meters, and sensors

Real Devices
Train, validate, and test without risking live production environments
Functional Capabilities
- Incident Response
- Continuous Diagnostics & Monitoring (CDM)
- Baseline Development
- Protocol Training
- Threat Simulation & Validation
- Forensics & Root Cause Analysis
- Security Testing and Validation
- Research & Development
Data & Analytics
- Build operational baselines using raw analog, serial and IP protocol data
- Replay and Simulate cyber-physical operational processes for analysis
- Test and validate detection thresholds and alert logic
- Visualize message flows, inter-byte timings, and protocol abnormalities
- Develop, build and test AI/ML models
Use Cases
- Level 0 – Level 5 hands-on ICS/OT protocol training
- Incident response tabletop exercises
- Tailored anomaly detection and analysis
- Patch testing and validation
- Cyber-physical forensics
Cyber Use Case:
Detection and Forensic Analysis of Man-in-the-Middle (MitM) Attacks on Serial Communications


Operational Use Case:
Early Detection of Sensor Drift or Analog Signal Degradation


ML/AI Use Case:
Training Anomaly Detection Models Using Multi-Protocol ICS Baseline Data


Benefits
- Safe, Realistic ICS Training: Learn, test, and respond without impacting production systems
- Multi-Level Architecture Simulation: Recreate scenarios from field devices to control network
- Protocol Diversity: Gain hands-on familiarity with legacy and modern ICS/OT protocols

Professional Services
- Instructor Led Training
- CyRenLAB Environment Customization